🔑 Strong Password Generator

Make a password that is really hard to guess — in your own browser. We never see it and never save it.

What this tool does

It makes random passwords with your browser's secure random generator (the same kind banks and password managers use). You can choose random characters, or a passphrase made of real words like Tiger-Moss-Lamp-Ocean-Violet-42, which is easier to type on a phone but still very strong. The password is created on your device and is never sent or saved.

How to use it

1. Choose Random characters or Passphrase.
2. Set the length (16+ characters or 5+ words is a good start).
3. Tap New password until you like one.
4. Tap Copy and save it straight into your password manager.

How to read the result

Bits measure how many guesses an attacker needs: every extra bit doubles it. Under 45 bits is weak, 65+ is strong, 90+ is very strong. *The guessing time assumes a powerful attacker trying 100 billion guesses per second against a stolen password database — it is a rough guide, not a promise.

When it is useful

• New email, bank, Amazon or social media accounts.
• Wi-Fi passwords (use a passphrase — easier for guests to type).
• Replacing an old password after a data leak.
• Making a master password for your password manager (use 6+ words).

What it cannot do

• It does not save your passwords — copy it into a password manager right away, or it is gone.
• It cannot protect you if a site is hacked or you type the password on a fake (phishing) page.
• It does not check if a password was leaked before.
• A strong password is not enough alone — turn on two-factor login (2FA) for important accounts.

Privacy: everything runs inside your browser. Your text is not sent to our server and is not saved.

Questions people ask

Is it safe to make a password on a website?

Here, yes: the password is made by JavaScript in your browser using crypto.getRandomValues. It is never sent to our server. You can even turn on flight mode after the page loads and it still works.

How long should my password be?

At least 12 characters for normal accounts, 16+ for email and banking. For a passphrase, use 5 words or more (6 is better).

What is a passphrase?

A password made of several random words. It is long, strong and easier to remember and type than random symbols.

Why remove look-alike characters?

Characters like 0 and O, or l, 1 and I look almost the same. Removing them avoids typing mistakes, especially when you type the password from paper.

Should I use the same strong password everywhere?

No. Use a different password for every account. If one site leaks, the others stay safe. A password manager makes this easy.

More free tools